We've been knee-deep in identity access management for years – and we've got the stories (and scars) to prove it. No copy-paste advice here – just honest insights from the field.
In December 2025, an AWS engineer used Kiro, Amazon’s internal AI coding agent, to push a quick fix to a customer-facing system. Instead of a minor patch, Kiro decided the best path forward was to delete and recreate the entire environment. The result was a 13-hour outage for AWS Cost Explorer in China. Two months […]
Read more
Are your IAM efforts delivering real business value? Tracking activity alone won't tell you. Discover 13 IAM metrics that reveal how well your identity program performs. Learn how to measure what matters, demonstrate improvements in security and efficiency, and build a compelling business case for IAM investments.
Read more
HR data is a natural foundation for IAM automation, but it can’t tell the whole story. Explore why inaccurate HR data, outdated identity information, and over-reliance on organization charts can lead to incorrect access decisions — and how role mining can help build a more accurate access model.
Read more
SMS authentication has been around for years because it is simple and familiar. A code arrives on a phone, and the user enters it. But now that identity platforms are moving toward phishing-resistant authentication, SMS and voice are becoming less central to the authentication stack.
Read more
Entra ID and One Identity aren't two versions of the same product, coming from different companies. They were built for different primary problems, and choosing between them starts with your environment instead of your existing vendor relationships.
Read more
Employee offboarding can leave serious security gaps when HR and IT work from different processes. Learn how active accounts, outdated permissions, and weak deprovisioning workflows can put your organization at risk
Read more
Starting with group-based access feels simple, but scaling often leads to chaos. Discover the key stages of the IAM maturity model, pinpoint where teams usually hit a wall, and learn actionable steps to map your organization's current position while building a clear path forward.
Read more
Go-live isn't the moment an IAM project succeeds. Real success becomes visible months later, when roles stay clean, processes are followed, and the platform delivers business value. Here's what separates projects that last from those that quietly fall apart.
Read more
AI capabilities get the headlines, but uncontrolled AI actions cause the real anxiety. With governance lagging behind adoption, securing production systems requires shifting from permanent access to strict, just-in-time permissions.
Read more